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DETAILED ACTION 

1 . This action is responsive to communications: application, filed 4/6/2001 ; 
amendment filed 9/10/2007. 

2. Claims 1-21, 25-65, 69-84, and 86-97 are pending in the case. 

Response to Arguments 

3. Rejection under section 112 outlined in the last Office Action is withdrawn due to 
amendments by the applicant. Note that as stated by the applicant, the "whole license" 
now includes a constructed license and a valid signature, which is at least a part of the 
activation code. Therefore the constructed license is now part of the whole license. Also 
note that applicant's amendments have raised new issues and created new grounds of 
rejection outlined in the next sections. 

Information Disclosure Statement PTO-1449 

The Information Disclosure Statement submitted by applicant on 7/19/2007 and 
6/15/2007 has been considered. Please see attached PTO-1449. 



Claim Rejections - 35 USC §112 
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4. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

5. Claim 1 rejected under 35 U.S.C. 112, first paragraph, as failing to comply with 
the written description requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to reasonably convey to one skilled in 
the relevant art that the inventor(s), at the time the application was filed, had possession 
of the claimed invention. 

5.1 . Claim 1 includes creating a "whole license" consisting of a constructed license 
and a digital signature. Applicant does not specify a portion of Specification that 
supports or describes such limitation. Note that the constructed license is different than 
the whole license. No example embodiment describing constructing a license using 
license parameters available to the playback device, not using the text-based activation 
code is specified by the applicant. 

5.2. Claim 1 includes repeating the verification steps until the cryptographic signature 
is determined to be valid. Applicant has not identified any part of Specification in support 
of the said new limitation. 



Claim Rejections - 35 USC § 103 
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6. The following is a quotation of 35 U.S.G. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-21, 25-65, 69-84, and 86-97 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Siann (US Patent Application No. 2003/0120541 , filed 12/21/2001). . 

6.1 . As per claims 1 and 25, Siann is directed to a method including providing a 
system including a playback device; sending to a device, via a transport technique not 
including in the playback device (Fig. 1B clearly indicates a transmission path separate 
from the media player, as described in paragraph 99. Note that the Media Player 
includes a play back device and a transmission/reception device and a device to 
enforce the access rules, and therefore the message is sent while not including the 
playback device). A text-based activation code (paragraph 43, Also, paragraph 39 
describes access data as, for example, an authorization code, which is used to ensure 
that the media player can decrypt the content. Therefore, access data is used to permit 
execution of content (content being displayed) in the player device, which is the same 
as description of the activation code in applicant's specification page 15 lines 8-12.) that 
includes data from which rights information is verifiable by the system (Fig. 1B and 
paragraph 43. Also parag. 80 shows access data allows rights information to be verified 
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as it states: "Access data 164 allows the electronic media content 110 to be secure, 
such that the electronic media content 1 10 is usable only if the proper access data have 
been provided to the media player 120".); enforcing the rights information on the system 
in response to the text-based activation code (paragraph 80 and 39); wherein the 
enforcing includes: 
Repeating: 

constructing a license using license parameters available to the playback system, 
not using the activation code (Siann parag. 98, in accordance with fig. 4, describes 
access rules, which provide information whether or not to allow media content to be 
used by the user. The access rules are used in combination with access data as a 
security mechanism to ensure that electronic content is secure. Therefore, Siann 
teaches a mechanism that in conjunction with access data, provides information 
sufficient for the secure player to verify the authenticity of the content and to use the 
content, and to verify that the specific user has rights to execute or present the content 
at the specific playback device. Therefore, Siann teaches the license as described by 
applicant's definition (see also parag. 100-108). Siann also teaches access data can be 
sent to the player device in a separate channel from the media content. According to 
parag. 99 and 103, access rules and access data are transmitted in separate paths. Per 
parag. 103, access rules may be programmed in the media player. Therefore, Siann 
teaches access rules (license) that is produced using data available in the play back 
device, and not using the access data (activation code). Also see parag. 68, where 
Siann teaches electronic media is Pre-loaded); 
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constructing a license using license parameters available to the 
playback system, not using the text-based activation code; 
authenticating the constructed license using at least part of the text- 
based activation code as a cryptographic signature; 
checking that the cryptographic signature is a valid signature using a 
trusted license server; 

selecting a different set of license parameters if the cryptographic 
signature is not valid; 

until the cryptographic signature js determined to be a valid signature for the 
constructed license, wherein the valid signature and the constructed license constitute a 
whole license; 

launching content associated with the whole license in accordance with the 
license parameters. (Sian paragraph 51 shows that the system allows secure delivery of 
content using cryptographic methods. As indicated above, Siann teaches decryption as 
a choice of security mechanism for verification, and decryption is clearly a cryptographic 
method. The verification is performed using access data. Therefore, Sian teaches using 
cryptographic methods to authenticate and verify access data to make data available to 
the user. As indicated in the above, Siann's content data is available at the playback 
device and is verified using credentials (access code). Siann, however, does not 
explicitly teach repeating the verification process with other sets of access data until the 
result of verification is positive, and access is allowed. Examiner takes an Official Notice 
that storing several different credentials, licenses, or in general, verification data at the 
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point of access, and verifying each credential to find a match with the required 
credentials was well known and broadly practiced at the time of invention. Therefore, it 
would have been obvious to the one skilled in art to try verifying all credentials available 
at the access point to find a match and allows access to the data.). 



6.2. As per claims 2, 32, Siann is directed to a method as in claim 1 and 27, including 
steps of ensuring that only authorized content is executed or presented by the playback 
device or a secure processor, or by both in combination or conjunction (paragraph 98). 

6.3. As per claim 3, Siann is directed to a method as in claim 1 , including steps of 
sending content to the playback device using a communication link not used by the 
steps of sending a text-based activation code (Fig. 1B and associated text) 

6.4. As per claim 4, Siann is directed to a method as in claim 1 , wherein the steps of 
enforcing are performed at least in part by the playback device or a secure processor 
coupled thereto (paragraph 98). 

6.5. As per claim 5, 31, Siann is directed to a method as in claim 1 and 27, wherein 
the steps of enforcing are performed by mandatory security hardware or mandatory 
security software (paragraphs 53 and 96). 
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6.6. As per claim 6, Siann is directed to a method as in claim 1 , wherein the steps of 
enforcing include steps of decrypting at least some information derivable from the 
text-based message (paragraph 43 discloses delivery of access data using text-based 
messages (SMS) and paragraph 105 discloses decrypting of access data using keys.). 

6.7. As per claim 7, Siann is directed to a method as in claim 1 , wherein the steps of 
enforcing includes using a key derived from the activation code for decrypting a license 
or content (paragraph 105). 

6.8. As per claim 8, Siann is directed to a method as in claim 1 , wherein the steps of 
enforcing includes putting together at least an identity of the playback device and an 
identity of content; applying at least part of the message, the identity of the playback 
device, and the identity of the content to authenticate the execution rights for the 
playback device for the content (paragraph 106 describes content media access control 
based on messages directed to the Media Player. Authentication of content and access 
control based on content identification, device identification and the authenticating 
message was a standard, well-known and widely practiced at the time of invention.). 

6.9. As per claim 9, 33 Siann is directed to a method as in claim 1 and 27, wherein 
the steps of enforcing includes applying a key derived from the activation code as an 
authentication code (paragraph 56 discloses user and content identification data 
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transmitted to media player as part of access data and paragraph 97 discloses securing 
access data using cryptographic methods). 

6.10. As per claim 10, Siann is directed to a method as in claim 1, wherein the 
activation code is composed on an SMS (paragraph 57). 

6.1 1 . As per claim 1 1 , Siann is directed to a method as in claim 1 , wherein at least a 
portion of the activation code is manually entered into the playback device (paragraph 
47 describes manual entry of the data by humans, which discloses manual entering of 
the access code to the media player by a human). 

6.12. As per claim 12, Siann is directed to a method as in claim 1 , wherein at least a 
portion of the activation code is provided to the playback device, wherein the playback 
device processes the portion of the activation code and produces a licensing message 
suitable to be sent by the device, and wherein the licensing message is provided to the 
device (paragraph 81. Also, paragraph 90 describes content provider payments when 
users play their content or download the licensed content. This clearly implies a 
licensing message from user to content providers via Media Player. Note that per 
paragraph 95 the communication between the Media Player and Content Providers is 
two way). 
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6.13 As per claim 13, 30, Siann is directed to a method as in claim 12 and 27, wherein 
the licensing message is encrypted or cryptographically authenticated by the device and 
sent to a license server (per paragraphs 9 and 83, the communication between different 
elements is secured, and per paragraph 51, security is provided by use of cryptographic 
methods). 

6.14. As per claim 14, Siann is directed to a method as in claim 1 , wherein the steps of 
enforcing include steps of using a decryption key available to the playback device or a 
secure processor coupled thereto (paragraph 80). 

6.15. As per claim 15, Siann is directed to a method as in claim 1, wherein said text- 
based activation code is included in a first message, further comprising sending a 
second message from the device to a license server (paragraph 81); sending a first 
message from the license server to the device (paragraph 81), the first message 
including human-readable characters; and manually entering those characters to an 
input element coupled to the playback device (paragraph 47 describes manual entry of 
the data by humans, which discloses manual entering of the access code to the media 
player by a human). 

6.16. As per claim 16, Siann is directed to a method as in claim 1, wherein the system 
includes a closed content distribution system capable of delivering content to the 
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playback device using a second transport technique not including that used by the steps 
of sending a text-based message (Fig. 1B and associated text). 

6.17. As per claim 17, Siann is directed to a method as in claim 1 , wherein the system 
includes a closed content distribution system capable of ensuring that only authorized 
content is presented by the playback device or executed by the secure processor 
(paragraph 98). 

6.18. As per claim 18, Siann is directed to a method as in claim 1, wherein the system 
includes a secure processor capable of authenticating content coupled to the playback 
device in response to that authentication code (Item 480 of Fig. 4 and associated text. 
Siann paragraph 79 discloses a header of media content that includes information to 
identify the content and access data. This data is used to authenticate the data and 
determine if the content should be made available to user). 

6.19. As per claim 19, Siann is directed to a method as in claim 1 , including steps of 
authenticating the right information by the playback device or a secure processor 
coupled thereto (right information is included in the access rules, paragraph 40. Siann's 
method provides access rules to the Media Player in a secured manner). 

6.20. As per claim 20, Siann is directed to a method as in claim 1 , further comprising 
decrypting at least some information derivable from the text-based activation code 
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(paragraph 43 discloses delivery of access data using text-based messages (SMS) and 
paragraph 105 discloses decrypting of access data using keys). 

6.21 . As per claim 21 , Siann is directed to a method as in claim 1 , further comprising 
using a decryption key available to the playback device or a secure processor coupled 
thereto (paragraph 80). 

6.22. Claims 22-24, 66-68 and 80 cancelled by the applicant. 

6.23. As per claims 25 and 26, Siann is directed to a method as in claim 25 (see 
response to claim 1 and note that Siann discloses SMS as a method to send messages 
in paragraph 43, and authentication and media access control based on device ID and 
content ID and authenticating/authorizing message was a well-known standard practice 
to authenticate and enforce access control at the time of invention. Note also that Siann 
teaches using SMS for transmission of access codes. SMS stands for Short Messaging 
System, and is short enough to be convenient for a human to read or enter.), wherein 
the playback device includes at least one of rights enforcing hardware, rights enforcing 
software, further including authenticating the rights information using the 
rights-enforcing hardware or rights-enforcing software, enforcing the fights information 
on the system using the rights enforcing hardware or rights enforcing software, in 
response to the text-based message. 
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(paragraph 56 describes user and content identification data transmitted to media 
player as part of access data and paragraph, which discloses authentication. 
Paragraphs 53 and 96 disclose use of software and hardware to perform operations.). 

6.24. As per claims 27, 28, and 29, Siann is directed to a method including steps of 
sending a text-based message to a hand-held device using an SMS technique, the 
text-based message including information from which rights information is derivable by 
a system including a secure processor and a playback device under control 2 of that 
secure processor; authenticating that rights information at the secure processor in 
response 4 to mandatory security software executed by the secure 'processor; and 
enforcing that rights information on the system in response to that text-based message 
(see response to claims 1, 4 and 5). 

6.25. As per claims 36, Siann is directed to a method comprising providing, in a closed 
content distribution system, an SMS text message that includes license information 
(license information is included in access data, which is delivered as depicted in Fig. 1B 
and associated text. SMS delivery method is disclosed in paragraph 43), in a form that 
is small enough for a human to conveniently enter (SMS messages are short enough to 
conveniently enter), the closed content distribution system including a playback device 
and a secure processor (the Media player as indicated in Fig. 4 and the associated text, 
includes a device to play the media to the output device and a secure processor (item 
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480 performs cryptographic functions to authenticate and access control)), wherein the 
SMS message is sent via a communication link not including the playback device or 
secure processor (see response to claim 1), constructing, at the playback device, 
license parameters including device ID, a content ID, and a rights code identified by the 
activation code (parag. 79); using at least part of the SMS text message as a signature 
to authenticate the constructed parameters of possible execution rights (Siann teaches 
media authentication and access control using signatures and credentials delivered via 
messages sent to the Media Player in, for example, paragraph 86. Siann also teaches 
using SMS as a method of delivering messages (paragraph 43). Therefore, Siann 
teaches delivery of access control data in its methods of transmission, one of which is 
SMS. The access control parameters delivered via messages are used at the Media 
Player to enforce authentication and access control.); allowing content identified by the 
content ID to be executed or presented by the playback device or the secure processor, 
or by both in combination or conjunction in accordance with the constructed and 
authenticated license parameters, wherein the playback device or secure processor or 
both in combination or conjunction are associated with the device ID (see parag. 92 
where device ID is identified for paying revenue to the owner, therefore teaching 
verification of the device ID as part of the verification and enforcing access rules); 
ensuring that rights information associated with the rights code is enforced by the 
playback device or the secure processor, or by both in combination or conjunction (see 
responses to claims 1 to 9). 
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6.26. Claims 37 and 38 are disclosed by Siann as it discloses claim 36 (see above) 
and all other limitations as described in responses to claims 1 to 26. 



6.27. As per claims 40 to 42, 44 to 46, 48 to 49 Siann's Fig. 1 B and associated text 
discloses a method of delivery of content and all other limitations as described in 
responses to claims 1 to 26. 

6.28. As per claim 43, Siann is directed to a method as in claim 36, wherein the 
communication link includes a cellular telephone (paragraph 41) 

6.29. As per claims 47, Siann is directed to a method as in claim 36, wherein the 
secure processor includes a computing device capable of general purpose processing 
(paragraph 50). 

6.30. As per claims 50, Siann is directed to a method as in claim 36, including steps of 
performing a commercial transaction concurrently with communication between a 
license server and a user (paragraph 71 indicates that the user purchases content using 
the system, therefore performing a commercial transaction). 

6.31 . As per claims 51 to 65 Siann is directed to a method as in claim 50 and all other 
limitations as described in responses to claims 1 to 26. 
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6.32. As per claim 69 Siann is directed to a system comprising a closed content 
distribution system (Fig. 1B) including a playback device (fig. 3 item 310) and a secure 
processor (fig. 4 item 480); a communication link not including the playback device or 
secure processor (Fig. 1B item 162); a license server capable of being coupled to the 
communication link (Fig. 1B item 160); wherein the playback device or the secure 
processor, or both in combination or conjunction, includes mandatory security software 
that is configured to construct parameters of execution rights, and to use at least part of 
the text message as a signature to authenticate the constructed parameters of 
execution rights (paragraphs 53 and 96, and see response to claim 36). 

6.33. As per claims 70 to 87, 89 to 90 Siann is directed to a method as in claim 69 and 
all other limitations as described in responses to claims 1 to 26. 

6.34. Limitations of claims 34 and 35 are substantially the same as claims 1 to 9, with 
the added limitation of using a token to identify and deliver the signature to the playback 
device. Use of tokens to deliver a signature or other forms of 

authentication/authorization credentials was well-known and widely practiced at the time 
of invention. Barring ant unexpected results, use of tokens as a method to deliver 
authentication credentials would have been trivial to a person skilled in the art at the 
time of invention. 



Application/Control Number: Page 17 

10/727,332 

Art Unit: 2132 

6.35. As per claims 39, Siann is directed to a method as in claim 36, including steps of 
encoding the license information using a digital signature, secure hash, or shared 
secret; and authenticating the license information by the playback device or the secure 
processor, or by both in combination or conjunction, in response to the digital signature, 
secure hash, or shared secret (paragraph 51 discloses use of cryptography in securing 
different processes and digital signatures, hashes and shared secret are well-known 
methods of providing security using cryptographic methods). 

6.36. As per claim 91 , Siann is directed to the method of claim 1 , further comprising: 
constructing parameters of execution rights (see response to claim 1) sending a 
text-based message to a hand-held device using an SMS technique (paragraph 43, also 
note that per paragraph 37, the Media Player is a portable, and therefore a hand-held, 
device), the text-based message including information from which rights information is 
derivable by a system including a playback device (Fig. 1B and paragraph 43); and 
enforcing that rights information on the system in response to that text-based message 
(paragraph 80 and 39); wherein the steps of sending include a transport technique not 
including the playback device (Fig. 1B clearly indicates a transmission path separate 
from the media player, as described in paragraph 99), and the security is enforced by a 
mandatory hardware device (Fig. 4 and associated text), and using the message as a 
signature to authenticate the rights (Siann teaches cryptographic methods of verification 
and using digital signatures is a well-known method of authenticity verification). 
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6.37. As per claims 92 and 94, Siann teaches using cryptographic keys for verification, 
and public and secret key cryptography is a well-known method of verification using 
keys. 

6.38. As per claim 93, Siann teaches using cryptographic verification, and MAC is a 
well-known method of verification. 

6.39. Limitations of claims 95-97 is substantially the same as portions of claims 1-27 
and 92-94 above. 

Conclusion 

7. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
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extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Farid Homayounmehr whose telephone number is (571) 
272-3739. The examiner can be normally reached on 9 hrs Mon-Fri, off Monday 
biweekly. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571) 272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Farid Homayounmehr 
11/24/2007 
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